General

  • Target

    2cb335562a323b6f67911a65c8914cfa59c92b77d37dce18cde1bc3ea02dd762

  • Size

    128KB

  • MD5

    1af55ea3e6a1443a1b860a035bb97db6

  • SHA1

    bb2ef2d8370228eed3c62a3d1af439fbc3ac201f

  • SHA256

    2cb335562a323b6f67911a65c8914cfa59c92b77d37dce18cde1bc3ea02dd762

  • SHA512

    fedfb967421e789e760c17ac87f8e571790a58c02ef444cef68fad4d18539c70f9b6532a5f67cd43b40f4212973f9c00a2120fd81bd6e52c45dee32950f19c43

  • SSDEEP

    1536:Qnjf+3hruxPasKy8maeXRkc7NeWGbN19ftb0UvMFMQiNJRlAgF+QM8jUln:4S9kumkJbN19ftbsAR2gF+jlln

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

198.11.11.11:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cb335562a323b6f67911a65c8914cfa59c92b77d37dce18cde1bc3ea02dd762
    .exe windows:4 windows x64 arch:x64

    9064acbe24a91bd2cb1449fa5b246cb0


    Headers

    Imports

    Sections